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1. INTRODUCTION 

In order to cope with the need of the industrial market and the increasingly severe economic 
competition, industrialists tend increasingly to expand their facilities and make them more complex. Indeed, 
this complexity makes the control systems of industrial systems more difficult and specially to reduce safety 
and increase the risk of breakdowns [1-4]. In addition, supervisory systems use intelligent systems that 
provide the user with assistance in managing their urgent alarm tasks in order to increase the reliability and 
dependability of processes [5-10]. However, the improvement of the dependability of the systems is 
essentially based on fault detection and isolation algorithms [11-19], these algorithms have the role of 
comparing the actual behavior of the system wither ferrous behaviors describing the normal operation. 
The degradation of the performance of diagnostic algorithms is mainly due to the imperfect knowledge of 
the parametric values of the models and to their random variations [20]. Our research in this paper consists in 
using a new methodology for the supervision of industrial systems using the external model and the bond 
graph model. Supervision from the external model point of view considered an industrial system for an 
Operator as an entity offering services, which manipulate variables and use a set of resources [21-24]. 
The execution of a service is triggered by the verification of an activation condition, and requires 
the availability of a certain number of resources. At a given moment, this process is in a given mode of 
exploitation. Only the services belonging to this mode can be executed, from where each mode of operation 
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must comprise a specific service of change of mode. However, we cannot join any mode from another for 
reasons of security and consistency of operation. The problem to solve is to use a unifying tool to integrate 
the functional and structural models for the design of the supervision system (monitoring and 
reconfiguration). The bond graph tool is well suited for this task [25-30]. From a monitoring point of view, 
the causal and structural properties of the bond graph are used for the detection and isolation of faults 
affecting actuators, sensors or the physical components of the system. Thus, the availability of services, 
necessary for the accomplishment of a mission, will be provided by the monitoring algorithm to the operating 
mode management graph. Also, these services defined by functions can be generically to bond graph 
elements. From a reconfiguration point of view, the graphic properties will be exploited to be able to develop 
the means of reconfiguration of the system. 


2. SUPERVISION INDUSTRIAL PROCESS BY EXTERNAL AND BOND GRAPH MODELS 
2.1. External model 

External models structure the industrial process, according to several modes of operation (gradients 
and normal). Switching from one mode to another operating mode is described by a diagram called 
a management diagram of the mode of use. It represents the human-machine interface system. Industrial 
systems consist of a set of equipment interconnected with each other. A hardware failure of one or more of 
these elements may dare to drive some of the purposes for which the system was designed, and then its hold 
alert users to generate alarms. The last must be sufficiently synthetic to clearly express to the operator 
the nature of the failure and its consequences. The external model that is proposed by [31] is considered here. 
This model is based on concepts of services, missions and operation modes. 

The industrial systems consist of a set of equipment (heat exchanger, motor pump ...), which are 
organized so that the systems can achieve the objectives for which they were designed: 
— The low level: These are the basic services; they are directly interfaced with the process (pumps, valves, 

sensors ...). 

— High level: These are composite services; they are composed of basic services (cooling, boiler ...). 

All services S, that are offered by equipment is defined: 

Si={iel1 ....n}. 

Basic services (low level) are associated with each other in defining compound services and perform 
a mission (Figure 1). A hardware failure means the unavailability of some basic services. 

Si: service 1 
= Mission Mı: S1, S4, S5, S6. 
— Mission M2: S2, S4, S7, Se. 
= Mission M3: $3, S3, S6, S7, So, S10. 
— Mission Ms: Sı, Sz 


Mission Mo 


Mission M4 


Mission M; 





Mission M; —> 


Figure 1. Services and missions 
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In this example we find ten (10) services and four (4) missions. Each mission has several services 
and the S4 service is in all four missions. The missions direct and manage the systems in accordance with 
the specifications. But at some point, only a subset of these missions is needed to achieve the goals. Each of 
these subsystems is called a mode of operation or operation. An operating mode (OMi) is a set of services 
represented by the following relation: Omi = (Sin, S2n, ... Snn) The operation modes are given by a general 
classification of the operating modes of the industrial devices: off-farm, configuration, manual or automatic 
mode, nominal ... etc. 

The supervision of industrial processes with the external model is determined by the management of 
the modes of operations, these modes of operations are interconnected to perform a well-defined function. 
The request to switch from one mode to another mode must be placed for security reasons because the system 
may fail on an OM] mode of use when some services are not available. The switch over is represented by 
a boolean variable bj. The set of operating modes and the bj switching conditions are described by a graph 
named operation mode management (Figure 2). 


b21 


bs M 
à Com) 
ba; Com.) 


Figure 2. Management of operating mode by external model 





2.2. Integration of bond graph and external models 

The integration of the bond graph model with the external model for the supervision of industrial 
processes is proposed by Ould Bouamama [32], this combination will be linked to the services, missions and 
modes of operation. 

The services as defined in the external models are represented by elements of the bond graph are 
the services offered by the power source equipment (mechanical: motor), (thermal: heat resistance) and 
(hydraulic pump) water). The services offered by the functional role of the equipment (storage, processing, 
transport, etc.) are represented in the bond graph by the basic elements respectively (the capacity C for 
the potential storage, the restriction R for the processing of air or water, transformer 7F for transforming 
electrical voltages or mechanical torques). It should be noted, however, that the services in jump graph can be 
quantified by constitutive equations deduced from the bond graph model. Missions represented by sets of 
services are intended to meet all the objectives set by the specifications, so in the sense of bond graph are 
the set of basic elements that provide a well-defined mission according to the objectives set 
the industrial process. 

The Modes of operations determined by the external model MEi are the same modes that will be 
represented by the MBGi model, from which each mode of operation OMi corresponds to a mode of 
operation must be modeled by a model graph bond MBGi: OMi. At a given time, the method operates in 
a nominal mode of operation represented by the external model MEfn corresponds to a model bond graph 
corresponds MBG/n. Let bij denote the requirement to move from MBGi to MBGj (Figure 3). 
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Figure 3. Management of operating mode by bond graph mode 


3. SUPERVISION OF A CENTRAL AIR CONDITIONING SYSTEM BY EXTERNAL AND 
BOND GRAPH MODELS 
3.1. Description central air conditioning system 

The central air conditioning system (CACS) provides refrigeration for room auxiliaries for medical 
experiments in a hospital by circulating a liquid whose temperature is maintained at “10°C”. The circulation 
of this cooled liquid is ensured by a valve (VC) (see Figure 4). 

The water is cooled by the three heat exchangers supplied in parallel (CACS;, CACS2 and CACS3), 
the temperature of the refrigerant is measured at the inlet and the outlet of the exchangers by the sensors Tmp 
and Toutp. 

The valve (VH) is used to modulate the flow of water according to which one, two or three 
exchangers are in service. Maintaining the temperature at 10°C is provided by the exchanger valves (V2, V22 
and V32) connected in series with each exchanger. The valves (Vi, V2; and V37) are used to supply the cooling 
systems under normal operating conditions (two cooling systems, on operation (three cooling systems) or 
reduced operation (one cooling system). 

In normal operation, the circuit is provided by two exchangers in use. During the summer can we 
add third exchanger. While during the winter only one exchanger can accomplish the operation and also to 
have gains in the level of electrical energy consumption. 

After a total stop (maintenance of the circuit, emptying ...), the restart will be done in a progressive 
way, that is to say so as to catch the minimum temperature of 10°C. 





Figure 4. Schematic diagram of central air conditioning system 
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3.2. System analysis by external and bond graph model in normal function 

The central air conditioning system consists of a set of equipment (exchangers, tarpaulins ...) that 
are organized in such a way that the system can meet the objectives for which it was designed. 

This equipment is arranged in two ways: 
— Single component: they are directly interfaced with the process (pumps, valves, sensors). 
— Complex component: they are composed services; they are composed by basic services (cooling circuits, 

water booster unit). 

According to this principle, it is possible to give a pyramidal decomposition of the cooling 

system (Figure 5). 
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Figure 5. Decomposition of the central air conditioning system 


The highest-level services are called missions. They must make it possible to satisfy all 

the objectives set by the specifications. The various missions of the CACS system are as follows: 

— Mission M;: Put the water in the circuit CACS; 

— Mission M2: Check the performances of the devices; 

— Mission M3: Set the bypass of the CS circuit (valves V72, V22 and V32); 

— Mission Mz: Reach the set temperature 10°C; 

— Mission Ms: Ensure the cooling of the auxiliaries by using the pumps (input by one pump P7; and one 
output by one pump P21) operating at 100%; 

— Mission Me: Ensure the cooling of the auxiliaries by using the pumps (input by tow pumps P; and P72 
output by tow pumps P2; and P22) operating at 150%, optimally on very hot days; 

— Mission M7: Ensure the cooling of the auxiliaries by using the pumps (input by one pump P7; and output 
by one pump P27) operating at “50%” according to the required configuration; 

— Mission Ms: Ensure minimal cooling when the unit is shut down; 

— Mission Mo: Maintain the circuit; 

— Mission Mjo: emptying the whole system. 

The missions of the cooling system are the ones responsible for leading and managing the system in 
accordance with the objectives of the specifications. But at a given moment, only a subset of these missions 
is necessary to meet the objectives set. Each of these subsets is called the operating mode. 

For this cooling system, seven operating modes can be distinguished are (Figure 6): 

— Preparation mode (ME’): The circuit is put in water and a set of tests must be executed; 

— Start mode (ME2): The water temperature is gradually brought to the set temperature. 

— Nominal operating mode (ME;3): Refrigeration is provided by two central air conditioning system and 
one pump operating at 100%; 
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— Reduced operating mode (ME4): Refrigeration is provided by one central air conditioning system and 
a one pump operating at 50%; 

— Operating mode (ME5): Operation with three refrigeration systems and two pumps operating at 150%; 

— Normal shutdown mode (ME¢): The slice is stopped but the set temperature is maintained by a minimum 
circulation; 

— Full stop mode (ME7): Coolant circulation is stopped and draining can be ensured. 





Figure 6. Management of operating mode by external model for central air conditioning system 


In this mode of operation (ME;: MBGs), the refrigeration of auxiliaries is ensured by the circulation 
of the liquid through two pumps (input by tow pumps P;; and P;2, output by tow pumps P2; and P22) 
operating at 150%. The bond graph model is given in Figure 7, this model presented clearly shows 
the physical phenomena that take place there with three cooling systems (CACS;, CACS2 and CACS3). 

In this mode of operation (ME3:MBG;3), the refrigeration of the auxiliaries is ensured by 
the circulation of the liquid thanks to one pump operating at 100%. The bond graph model is given by 
Figure 8, this model presented clearly shows the physical phenomena that take place there with two cooling 
systems (CacS; and CacS2). 

In this mode of operation (ME4: MBGz), operation with one pump operating at 50% and an 
exchanger in service are allowed. The bond graph model is given in Figure 9. 

To determine the analysis of any indstrial systems we must calculate the residuals, in our case 
the residues are as follows: 

a. Residueri: 
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Figure 7. Bond graph of central air conditioning system for over normal function mode MBGs5 





Figure 8. Bond graph of central air conditioning system for normal mode MBG; 
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Figure 9. Bond graph of central air conditioning system for reduced operating mode MBG4 


c. Rsiduer3: 












































1 dDe 1 
rn = ——.(De, — De, )— Cy (De, — De,) 
wi dt PI (3) 
d. Residuera: 
dDe, 1 
ry = (MSe De,) Cr. ——.(De, Des) =—.(De; De, ) 
c2 dt = Ry» Rp2 (4) 
e. Rsidue rs: 
S be) = Se D De, D 
= Ryo (SCe.42 e; ) P2* oy Rp .( Des e4 ) Rp» ( De; e4 ) 6) 
f. Rsidue re : 
1 dDe 1 
r, = —.(De, — De;) — Cy,.—* —-—.(De, — De,) 
R, dt R (6) 
g. Residue rzy: 
1 dDe, 1 
r = (MSe De,) Cri- (De, De;) (De, De,) 
Ro; dt Rw; P1 (7) 
h. Rsidue rs : 
=— (S D Ce e D D Z (Da D 
Iam R, (See 3 eg ) B O Rp, (Des ez ) Rp, (Des ez ) (8) 
i. Rsidue rg: 
1 dDe 1 
fy = ——.(De, — De, ) — C,,;.—— —- ——.-(De, — De,) 
w3 dt Rp (9) 
j. Residue rio: 
1 1 1 
r, = —.(MsSe — De,) - — .(MSe — De, )—- —.(MSe — De, ) 
Re R, Key (10) 


3.3. System analysis by external model in abnormal function 
If there is a material failure, the cooling system becomes unable to continue part of the missions for 
which it was designed, the operators of driving and maintenance must be informed. The manufacturers of 
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the cooling system associate nine (09) alarms with the cooling system, they are illustrated in Table 1 and this 

table gives for each defect a list of services and missions. 

Alarm 01A: this fault is associated with the cooling system (CACS7), the missions affected are 
missions 1, 2, 3, 4, 5 and the operating mode is threatened ME3. 

a. Mission 1: we find this mission in the operating mode in preparation, the absence of this mission makes 
the mode in preparation unavailable. If the mode of preparation is the current mode, in the presence of 
a fault, the automatic transition to another mode must be considered. For this case we find 
two possibilities: 

— Start mode: switching to this mode is impossible since it is not available. 
— Total stop mode: switching to this mode is possible since it is available. 

b. Missions 2, 3, 4: these missions are found in the startup mode, the absence of this mission makes 
the start mode unavailable. If the start mode is the current mode, in the presence of a fault, the automatic 
transition to another mode must be considered. For this case we find two possibilities: 

— Nominal operating mode: switching to this mode is impossible since it is not available. 
— Operating mode in preparation: switching to this mode is possible since it is available. 

c. Mission 5: this mission is found in the operating mode nominal operation; the absence of this mission 
makes this mode unavailable. If the nominal operating mode is the current mode, in the presence of 
a fault, the automatic transition to another mode can be considered, for this case we find 
two possibilities: 

— Reduced operation: the transition to this mode is impossible since it is not available. 
— Normal stop operation: switching to this mode is possible since it is available. 

d. Mission 8: we find this mission in the operating mode normal stop, the absence of this mission makes 
this mode is unavailable. If the nominal operating mode is the current mode, in the presence of a fault, 
the automatic transition to another mode can be considered, for this case we find two possibilities: 

— Reduced operation: the transition to this mode is impossible since it is not available; 
— Normal stop operation: switching to this mode is possible since it is available. 


Table 1. Availability of services and missions in the presence of defects 
Alarms Defaults Services Missions 


OTA. -ercSvexchanseriede’. T Mauontemp max 1,2,3,4,5 
Regulation_temp_min 


0A. ACS exchankerien: -elation temp max (304 
Regulation_temp_min 


03A CACS; exchanger leak Regulation_temp_max 1,2,3,4, 6 
Regulation_temp_min 


blocked valve V; Regulation_temp_max 


04A closed Regulation_temp_min Daa 
Regulation_temp_max 

OE ae Regulation_temp_min 1, 2,3,4,5 
blocked valve Vņ Regulation_temp_max 

05A closed Regulation_temp_min 1,2,3,4,7 


blocked valve V;2 open Regulation_temp_max 1,2,3,4,7 
Regulation_temp_min 


blocked valve V3, Regulation_temp_max 


06A closed Regulation_temp_min 1, 2,3, 4,6 
blocked valve V2; open Regulation_temp_max 1, 2, 3, 4, 6 
Reeulation_temp_min 
blocked valve V2 Regulation_temp_max 
1, 2,3,4,5 
07A closed Regulation_temp_min 
blocked valve V22 open Regulation_temp_max 1,2,3,4,5 


Regulation_temp_min 


blocked valve V3; Regulation_temp_max 


08A closed Regulation_temp_min lera 
blocked valve V3; open Regulation_temp_max 1,2,3,4,7 
Regulation_temp_min 
blocked valve Vz Regulation_temp_max 
; : 1, 2, 3,4, 6 
09A closed Regulation_temp_min 
blocked valve V32 open Regulation_temp_max 1, 2, 3, 4, 6 


Regulation_temp_min 
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3.4. System analysis by bond graph model in abnormal function 

The alarm 01 corresponding to a fault (leak) at the cooling system (CAS;), this fault causes 
a decrease in the amount of water cooled. These phenomena are readable on the bond graph model and can 
be quantified by the equations. However, this faulty component (CACS7) is in the normal operating mode 
(MBG3), so switching to the reduced operating mode (MBGz) or the normal stop operating mode is allowed. 
For the generation of the residues of each mode, we applied the method of the redundant analytical 
relationships (RRAs), we also call residues. In the case of over normal mode (MBGs) we end up with 
the following equations of residues: 

The residual curves (77, r2, 73, r4, 15, F6, F7, r8, ro and rjo) in Over normal operating mode (MBG3) 
converge to zero, see Figure 10. 

When a fault in the cooling system (CACS/), the residues (77, r2 and r3) are sensitive to this defects. 
Or their curves become different to zero at the moment of failure (between 20000s and 40000s) see Figure 11 
(evolution of residues) a Figure 12 (evolution of temperatures for each system CACS;, CACS2 and CACS3). 
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Figure 10. Evolution the residues ry (t), r2 (t), r3 (t), r4 (t), rs (t), re (t), r7 (t), rs (t), ro (t) and rio (t) for over 
normal function mode MBGs without fault 
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Figure 11. Evolution residues r; (t), r2 (t), r3(t), ra(t), rs(t), re (t), r7(t), rs(t), ro(t) and rio (t) for over normal 
function mode MBGs with fault (leak at the cooling system) 
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Figure 12. Evolution the evolution of the exit temperatures of the CS1, CS2 and CS3 systems for over normal 
function mode MBG; with fault (leak at the cooling system) 


4. CONCLUSIONS 

In this part, we give for the treatment of alarms of the System of intermediate Refrigeration (CACS) 
specific to each modeling: 

The external model: Structure the operation of CACS system according to several modes of 
Operation, switch from one mode to another when a mission disappears and evaluate the relevance of 
the alarm system; 

The bond graph model: Clearly visualize the physical system (storage, dissipation, transfer as well 
as the dynamics of process phenomena, find the origins of the alarms by its causal organization, 
determination and localization of failures by RRA relationships and possibility to use the tools of 
the external model. 
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